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Real Party in Interest : 

This application is assigned to Francotyp-Postalia AG & Co . KG 
of Birkenwerder, Germany. The assignment will be submitted 
for recordation upon the termination of this appeal. 

Related Appeals and Interferences : 

No related appeals or interference proceedings are currently 
pending which would directly affect or be directly affected by 
or have a bearing on the Board's decision in this appeal. 

Status of Claims : 

Claims 1-27 are rejected and are under appeal. No claims were 
cancelled. 

Status of Amendments : 

No claims were amended after the final Office Action. A 
Notice of Appeal was filed on January 27, 2005. No Advisory 
Action has yet been received. 

Summary of the Claimed Subject Matter : 
As stated in the first paragraph on page 1 of the 
specification of the instant application, the invention 
relates to a mailing machine of the type having a controller, 
a security module, and a non-removable program memory. The 
invention further pertains to a method of intializing a 
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mailing machine of this type. The term mailing machine, as 
used herein, is to be understood as including, for example, 
franking machines and postage-calculating scales, i.e. mail 
scales, with an integrated postage calculator and similar 
mailing devices for which approval from the postal authorities 
is required. 



Appellant explained on page 15 of the specification, line 2, 
that, referring now to the figures of the drawing in detail 
and first, particularly, to Fig. 1 thereof, there is seen a 
basic diagram with a data source and with a dongle, at the 
interfaces in each case of the base of a franking machine. 
The franking machine comprises a meter 1 and a base 2 and is 
equipped for franking an item of mail 3. A perspective view 
of the franking machine of the JetMail® type is represented 
from behind in Fig. 3. For its initialization, a data source 
4 is connected to a first serial interface 92a of the franking 
machine. The data source 4 is, for example, a service PC or, 
preferably, a laptop. A dongle 5 is connected to a second 
serial interface 98b of the franking machine. The meter 1 of 
the franking machine has at least one program memory 10 with 
an initialization program and a security module 11, for 
checking the authorization before and during the 
initiali zation . 
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It is set forth on page 16 of the specification, line 1, that, 
in Fig. 3, a perspective view of a franking machine of the 
JetMail® type from behind is represented. The base 2 of the 
franking machine has a first serial interface 92a, at which 
the data source 4 can be connected. Fig. 3 also shows a view 
of a data source of the laptop type from the front, which can 
be connected via a cable 41 to the first serial interface 92a 
of the franking machine. Fitted onto the second serial 
interface 98b is a dongle 5. Both serial interfaces 92, 98b 
and further system interfaces 98a and 99a are located on the 
rear side of the franking machine and are in operative 
connection with the meter 1. The actuating elements 88 of a 
keyboard and the display elements 89 in the screen of a 
display unit of the meter 1 form a user interface, which is 
configured for the input of INIT values. However, a preferred 
means of input for the INIT values is the data source 4 . The 
base 2 is equipped with a switch 71 and with a key-operated 
switch 73, which are arranged behind a guide plate 20 and are 
accessible from the upper edge 22 of the housing. Once the 
franking machine has been switched on by means of the switches 
71 and 73, a fed-in letter 3, which is standing on edge and 
bears against the guide plate with its surface onto which 
printing is to be carried out, then has a franking stamp 31 
printed onto it in a way corresponding to the input data. The 
letter-feeding opening is laterally bounded by a transparent 
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plate 21 and the guide plate 20. Further stations or items of 
equipment can be connected to the interfaces 98a and 99a, in 
order to come into communication link with the franking 
machine. After the input of initialization data, including a 
zero credit value, a test takes place. During the franking 
with the postage value zero, only the value in the number-of- 
items register is incremented in the accounting operation. 
The postage value zero is in this case printed onto an item to 
be dispatched (letter 3) . 

Appellant outlined on page 17 of the specification, line 9, 
that, in Fig. 4, a basic diagram with a data source 4 at the 
interface 92a and with a dongle 5 at the interface 98b of the 
base 2 of a franking machine is represented. In the 
conf igurational variants according to Figs. 1, 3 and 4, it is 
provided that the data source 4 contains data for initializing 
the franking machine 1, 2 and is designed such that it can be 
fitted onto the first interface 92a of the base 2 of the 
franking machine. The authorization device 5, also referred 
to as means of authorization or authorization means 5 is 
designed such that it can be fitted onto a second interface 
98b of the base 2 of the franking machine. A dongle 5 
preferably serves as the authorization means. Optionally 
contained in the base 2 are a modem 8 and a further interface 
98c for the connection of the integrated modem 8 to a 
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telephone network. The modem 8 can be used for example to 
charge an amount of credit from a remote data center into the 
postal security module 11 of the franking machine. With the 
postal security module 11, it can also be checked whether the 
initialization program stored in the program memory 10 is 
called up in the authorized way and is running properly. In 
the variant according to Fig. 4, the meter 1 is connected via 
a further internal serial interface 97a to a chip card reader 
70 integrated into the base 2. After completion of the 
initializing process, a chip card or a smart card (not shown) 
can be inserted into the slot 72, in order to load further 
data. Such further data concern, for example, the image data 
for a predetermined location and date stamp. A method and 
arrangement for printing-stamp input into a franking machine 
has already been disclosed in the German patent application 
with the number 199 13 066.3, which is not a prior 
publication. Carrier-specific print-image data can be loaded, 
or selected for a country-specific variant of the franking 
machine, by means of a chip card. 

As described on page 20 of the specification, line 10, Fig. 8 
shows a basic diagram with a dongle 5 on a data source 4, 
which is connected at an interface 92a of the franking 
machine, and with a chip card reader 70 integrated into the 
meter 1, although the dongle 5 is the means of authorization. 
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The means of authorization (dongle) 5 is connected to the data 
source 4 via a parallel interface- The data source 4 is, for 
example, a personal computer or, preferably, a laptop. The 
data source 4 is coupled to the meter 1 via a serial interface 
92a of the franking machine. Consequently, as in the 
conf igurational variant according to Fig. 2 as well, the means 
of authorization (dongle) 5 is connected to the franking 
machine in an indirect way. It is provided that the meter 1 
has a program memory 10 for the initialization program and a 
postal security module 11 as a means for checking the 
authorization of an input of initialization data, or at least 
for the authorization of a data input of predetermined INIT 
values . 

Appellant further stated on page 21 of the specification, line 
10, that, in Fig. 9, the basic diagram for a conf igurational 
variant with a data source 4 connected to the interface 92a of 
the base 2 of a franking machine and with a chip card reader 
70 integrated into the meter is represented, the chip card 49 
forming the means of authorization. It is otherwise designed 
in a way corresponding to the design already explained with 
reference to Fig. 8. 

It is stated in the last paragraph on page 21 of the 
specification, line 18, that, in Figs. 5, 6, 7 or 9, chip 
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cards 49 are provided for insertion into the base 2 or into 
the meter 1 of the franking machine. The chip cards 49 
contain, for example: 

a card producer code MANCODE (15 bytes), 

a f ranking-machine producer code FPCODE (one byte) , 

a code for the physical card type PHYSTYP (one byte) , 

a personalization code MINIPERS (6 bytes), which includes 
the code of the producer of the franking machine, the 
producer of the chip card and the producer of the chip of 
the chip card in combination, 

a start date for the validity of the card VAL START DATE (4 
bytes) , 

an end date for the validity of the card VALENDDATE (4 
bytes) , 

an access code LOG1CTYPE (1 byte) , which shows that an 
authorization card exists, preferably for the vendor, and 

a unique authorization number (4 bytes) and also 

if appropriate, a country code COUNTRYCODE (4 bytes) - 

Appellant explained on page 22 of the specification, line 12, 
that it is provided that checking of the authorization is 
performed before and during the initialization on the basis of 
a unique authorization number, which is input via the chip 
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card 49. Alternatively, the unique authorization number may 
be input via the dongle 5. The authorization is given if the 
input unique authorization number has a predetermined 
relationship with a number stored in the postal security 
module 11. 

Appellant described in the last paragraph on page 22 of the 
specification, line 20, that, in another conf igurational 
variant represented in Fig. 10, the mailing machine is a set 
of scales 6 and the means of authorization is a chip card 49. 
A chip card reader 7 is integrated into the scales 6. A 
franking machine or an external modem (not shown) may be 
connected, in each case via interface 90 or 91, respectively. 
The set of scales contains, for example, a postage module 12, 
which additionally operates as a security module for checking 
the authorization of initialization data. 

As set forth on page 24 of the specification, line 8, the 
process for initializing a mailing machine has the following 
steps : 

• Switching into an initialization mode; 

• Authorization of the initialization by means of a means 
of authorization, for example a chip card 49 or a dongle 
5, and checking of the authorization by means of the 
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security module 11, in order to prevent initialization 
without authorization; 

• Input of initialization data, which are at least partly 
supplied by a data source (data center 4). The 
initialization data may be input from a personal computer 
(PC) connected to a serial interface. The PC may in turn 
be connected to a data center 4 by means of a modem or a 
serial or parallel connection. The mailing machine may, 
however, also be connected to the data center 4 via a 
modem, in order that the initialization data can be input 
into the mailing machine. The initialization data may be 
codes which are necessary for the encoded transmission of 
data. Furthermore, equipment and producer IDs stored at 
the data center 4 may be transmitted, and customer- 
specific data (for example zip code/postal code) , 
register values (minimum and maximum values for certain 
registers) may likewise be transmitted. After the 
transmission of initialization data, the mailing machine 
is enabled for use by a user. Charging with money is 
possible and so too is franking. 

• Ending of the initialization and cancelling of the 
authorization by removal of the means of authorization. 
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Appellant explained on page 25 of the specification, line 11, 
that, as in Figs. 5, 6, 7 or 9, 10, 11, chip cards 49 are 
provided as the authorization means 5 and the mailing machine 
6, or else the base 2 or the meter 1 of a franking machine, 
are equipped for the insertion of the chip card 4 9 with a chip 
card reader, with a modem interface 98c and with a modem. If 
the chip cards alone are provided for initialization, a chip 
card 49 is known as the initialization card (INIT card). All, 
or at least some, of the INIT data or values are then supplied 
to the franking machine from the remote data center via the 
modem interface 98c. The chip card 49 serves for authorizing 
at least that part of the INIT data or values which is loaded 
into the franking machine from the remote data center via a 
modem interface 98c. In Figs. 5 and 7, the modem interface 
98c is represented on the rear wall of the JetMail franking 
machine. In this case it is provided that the associated 
initialization program is stored at least partly in a program 
memory (EPROM) , which is a component part of the security 
module 11. Another part of the initialization program, in 
particular for initialization data which are stored in a non- 
volatile manner externally of the security module 11, is a 
component part of a separate program memory (EPROM) , which 
however is in connection with the security module 11. The 
security module prevents the loading or storing of data which 
are not authorized by the means of authorization 5 or 49. It 
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is provided that interrogation of the means of authorization 5 
or 49 is performed before and during the initialization of the 
mailing machine 1, 2 with predetermined INIT data. 

As further outlined on page 27 of the specification, line 12, 
the following information comprises the INIT data which have 
to be entered into the franking machine during initializing at 
the point of entry of the respective destination country: 

■ date of the battery of the security module, 

■ telephone number of the data center, 

■ postage call-up number PAN, 

■ predetermined INIT values and 

■ extra data and also 

■ if appropriate, codes at least for remote value input. 



Appellant stated on page 29 of the specification, line 7, 
that, during initializing, at least one common secret code 
DES-Key is loaded into a secure accounting device SAD, at 
least for the remote input of a credit when a secret key 
process is used. Furthermore, a common secret code MAC-Key of 
a mail carrier, required for generating a security imprint and 
its checking, may be loaded. The loading and constant 
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presence of an initialization program in the program memory of 
the franking machine requires special security measures in the 
SAD (secure accounting device) . For instance, the postal- 
relevant SAD serial number is pre-initialized already during 
production and can no longer be changed later unless a new SAD 
is installed. A serial number of the franking machine is not 
the same as the SAD serial number and in postal terms is of no 
further relevance. The franking machine is packed into a box 
on which a label with the SAD serial number is adhesively 
attached. The box is dispatched to a destination country 
remote from the location of production. At the goods 
receiving location of the destination country (single point of 
entry), initializing takes place after unpacking. If 
parameters of the franking machine have to be changed in the 
initialization mode, a record is kept of who makes these 
changes. Each dealer card has a unique authorization number 
for enabling the initialization mode. 

As outlined on page 30 of the specification, line 5, during 
initializing, the following steps are carried out: 

■ switching a franking machine into an initialization mode, 
for example as the result of activating a means of 
activating the user interface, and establishing a 



-13- 



Application No. 09/917,541 
Brief on Appeal, dated 03/24/05 

connection to a data source (4) via a modem or by means 
of a laptop or PC interface; 

■ authorization of the initialization by means of a means 
of authorization (5), for example by means of an FP card 
inserted into the chip card reader; 

■ input at least of the date BAT_DATE_SAD, for example = 07 
00, of the battery of the security module (11) SAD, a 
telephone number of the telepostage data center TDC of 
the destination country and a postage call-up number PAN, 
for example = 101 04711; 

■ sending of the serial number SAD-SN of the security 
module (11) to the telepostage data center TDC of the 
country, a comparison of the serial number SAD-SN sent 
with a stored serial number taking place there, and a 
notification being generated; 

■ reception of a notification sent by the telepostage data 
center TDC by the franking machine and loading at least 
of codes DES-Keys for credit recharging into the security 
module (11) SAD, the latter including: Key(0), Key(l), 
Kvar ; 
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■ ending of the initializa 
authorization by removal 
(5) , for example the FP 



tion and cancellation of the 

of the means of authorization 
card - 



Appellant stated on page 33 of the specification, line 1, that 
the automatic installation at the customer's by modem was 
proposed in principle first in the commonly assigned, 
copending German patent application Nr. 199 13 067.1 (not 
prior art), and the loading of further data (printing blocks 
relating to localities, promotional advertising, carriers) at 
the vendor by chip card was proposed in principle in the 
commonly assigned, copending German patent application Nr. 199 
13 066.3 (not a prior art). The aforementioned applications 
have the following titles: Method for the automatic 
installation of franking devices and arrangement for carrying 
out the method and Method and arrangement for printing-stamp 
input into a franking machine, and as far are necessary for a 
better understanding of this invention, all of the above- 
mentioned copending disclosures are herewith incorporated by 
reference . 

As outlined in the last paragraph on page 33 of the 
specification, line 24, the invention is not restricted to the 
present embodiment. Rather, a number of variants are 
conceivable within the scope of the claims. For instance, 



-15- 



Application No. 09/917,541 
Brief on Appeal, dated 03/24/05 

further other configurations of the invention, based on the 
same basic idea of the invention and covered by the attached 
claims, can obviously be developed or used. 

References Cited : 

US 6,424,954 B2 Leon July 23, 2002 

US 6,557,104 B2 Vu et al. April 29, 2003 

Grounds of Rejection to be Reviewed on Appeal 

1. Whether or not claims 1-27 are obvious over Leon (US 

6,424,954) in view of Vu et al. (US 6,557,104) (hereinafter 
"Vu") under 35 U.S.C. §103(a). 

Grouping of Claims : 

Claims 1 and 18 are independent. Claims 2-17 and 19-27 depend 
directly or indirectly on claims 1 and 18, respectively. The 
patentability of claims 4, 24, and 26 are separately argued. 
Therefore, claims 2, 3, 5, 6, 7-17, 19-23, 25, and 27 stand or 
fall with claim 1 or 18, but claims 4, 24, and 26 do not stand 
or fall with claim 1 or 18. 

Argument : 
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Before discussing the prior art in detail, it is believed that 
a brief review of the invention as claimed, would be helpful. 
Claim 1 calls for, inter alia, a mailing machine assembly, 
having : 

a mailing machine including a controller, a security module 
connected to the controller, and a non-removable program 
memory operationally connected to the security module and 
configured to store an initialization program; and 

a removable authorization device operationally connected to 
the mailing machine and configured to be interrogated by the 
mailing machine; and 

the security module programmed to check whether authorization 
is present and for preventing an initialization of the mailing 
machine without authorization. 

The mailing machine according to the present invention is 
based on a closed system, having a base and a meter, a 
security module or PSD (Postal Security Device) , with the base 
having a dedicated printer. The present invention provides a 
mailing machine which overcomes the deficiencies and 
disadvantages of the prior art devices and methods and has a 
ROM module with an initialization program, initialization data 
being introduced in a secure manner into the mailing machine 
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via an externally accessible interface, so that unauthorized 
initializing is prevented. There is provided a secure method 
without the need to change the ROM module that permits 
authorized initialization . 

Thus, according to the present the invention, there is 
provided a mailing machine assembly, having a mailing machine 
including a controller, a security module connected to the 
controller, and a non-removable program memory operationally 
connected to the security module and configured to store an 
initialization program, and a removable authorization device 
operationally connected to the mailing machine and 
configured to be interrogated by the mailing machine, such 
that the security module is programmed to check whether 
authorization is present and for preventing an initialization 
of the mailing machine without proper authorization. 

In contrast to the closed system of the present invention, 
Leon discloses an open postage metering system (e.g., see 
Fig. IB) that includes a host PC 120, a secure meter 
device (SMD) 150, and a non-dedicated printer 170. A' tamper 
evident enclosure houses the processor and security sensitive 
elements of the SMD. The printer is coupled to the SMD and is 
configured to receive and print indicia from the processor. 
Leon does not disclose a removable authorization device. Nor 
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does Leon show simultaneous operation of two different 
security systems as recited in the instant claims. 

Vu discloses a method and apparatus for secure processing of 
cryptographic keys, in which a cryptographic key stored on a 
token is processed in a secure processor mode using a secure 
memory. Vu does not disclose a security module for checking 
and preventing an initialization of a mailing machine without 
authorization. Vu' s disclosure relates to the field of 
computer security (International Class H04L 9/32), whereas the 
present invention and that of Leon relate to the field of 
postal meters (International Classes G07B 17/00 and G07B 
17/60). The present invention and the prior art disclosures 
of Leon and Vu are distinctly different on their face as 
evidenced by their respective distinctly different 
international classifications and the recitation of the fields 
to which they relate.. The disclosures of Leon and Vu are 
deemed non-analagous and therefore, not properly combinable. 
There is no motivation or valid basis for combining Leon and 
Vu other than hindsight reconstruction of the prior art based 
on appellant's claimed invention. 

Moreover, an open metering system (PC franking system) that 
would result from a combination of Leon and Vu would not meet 
the claim limitations. 
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The embodiment of Fig. 1A in Leon shows a postage metering 
system using an open metering system. Figs. 1A and 2A show a 
meter 110a having an integrated printer 152. The meter of the 
present invention is not similar to the meter 110a of the 
embodiments in Figs. 1A and 2A of Leon. A combination of the 
features of Vu and Leon results in a meter with an integrated 
printer in contrast to the present invention having a 
dedicated printer. 

The present invention provides an initialization of a mailing 
machine, and not of the security module or PSD (Postal 
Security Device) as disclosed in Leon. Leon discloses in 
cols. 12-13 and 26, Figs. 5a, 5b and 6b in particular, an 
initialization of the security module, not the mailing machine 
as recited in the instant claims. 

The references do not show "a removable -authorization device 
operationally connected to the mailing machine and configured 
to be interrogated by the mailing machine; and 

the security module programmed to check whether authorization 
is present and for preventing an initialization of the mailing 
machine without authorization" as recited in independent claim 
1 of the instant application. Independent method claim 18 
contains similar features. 
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Also, in contrast to claim 4, Leon does not disclose "a postal 
security device configured to check an authorization of the 
data input" as recited in the claim 4 of the instant 
application . 



Claims 24 and 26 positively recite the features "a data input 
sending the notification by the telepostage data center TDC 
including extra data stored in a non-volatile memory 
externally of the security module and including inkjet 
cartridge data" and "providing data input of extra data 
including inkjet cartridge data and storing the data in a non- 
volatile memory externally of the security module", 
respectively. Neither of these limitations is shown in Leon 
as acknowledged by the Examiner. 



It is well-settled that almost all claimed inventions are but 
novel combinations of old features. The courts have held in 
this context, however, that when "it is necessary to select 
elements of various teachings in order to form the claimed 
invention, we ascertain whether there is any suggestion or 
motivation in the prior art to make the selection made by the 
applicant". Interconnect Planning Corp . v . Feil , 227 USPQ 
543, 551 (Fed. Cir. 1985) (emphasis added) . "Obviousness can 
not be established by combining the teachings of the prior art 
to produce the claimed invention, absent some teaching, 
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suggestion or incentive supporting the combination". In re 
Bond , 15 USPQ2d 1566, 1568 (Fed. Cir. 1990) . "Under Section 
103 teachings of references can be combined only if there is 
some suggestion or incentive to do so." ACS Hospital Systems, 
Inc. v. Montefiore Hospital et al. , 221 USPQ 929, 933, 732 
F.2d 1572 (Fed. Cir. 1984) (emphasis original) . "Although a 
reference need not expressly teach that the disclosure 
contained therein should be combined with another, the showing 
of combinability, in whatever form, must nevertheless be 
'clear and particular.'" Winner Int'l Royalty Corp. v. Wang , 
53 USPQ2d 1580, 1587, 202 F.3d 1340 (Fed. Cir. 2000) (emphasis 
added; citations omitted) ; Brown & Williamson Tobacco Corp. v. 
Philip Morris, Inc. , 56 USPQ2d 1456, 1459 (Fed. Cir. Oct. 17, 
2000) . Appellants believe that there is no "clear and 
particular" teaching or suggestion in Leon to incorporate the 
features of Vu as suggested by the Examiner. 

In establishing a prima facie case of obviousness, it is 
incumbent upon the Examiner to provide a reason why one of 
ordinary skill in the art would have been led to modify a 
prior art reference or to combine reference teachings to 
arrive at the claimed invention . Ex parte Clapp , 227 USPQ 
972, 973 (Bd. Pat. App. & Int. 1985). To this end, the 
requisite motivation must stem from some teaching, suggestion, 
or inference in the prior art as a whole or from the knowledge 
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generally available to one of ordinary skill in the art and 
not from the applicant's disclosure. See, for example, 
Uniroyal, Inc. v. Rudkin-Wiley Corp . , 837 F.2d 1044, 1052, 5 
USPQ2d 1434, 1439 (Fed. Cir. 1988), cert, den., 488 U.S. 825 
(1988). It is respectfully submitted that the Examiner has 
not provided the requisite reason why one of ordinary skill in 
the art would have been led to modify Leon or to combine 
Leon's and Vu's teachings to arrive at the claimed invention 
for providing a mailing machine assembly as recited in the 
instant claims. Further, the Examiner has not shown the 
requisite motivation from some teaching, suggestion, or 
inference in Leon or Vu or from knowledge available to those 
skilled in the art. 

Appellant respectfully believes that any teaching, suggestion, 
or incentive possibly derived from the prior art is only 
present with hindsight judgment in view of the claimed 
invention. "It is impermissible, however, simply to engage in 
a hindsight reconstruction of the claimed invention, using the 
applicant's structure as a template and selecting elements 
from references to fill the gaps. The references themselves 
must provide some teaching whereby the applicant's combination 
would have been obvious." In re Gorman , 18 USPQ2d 1885, 1888 
(Fed. Cir. 1991) (emphasis added) . In the instant rejection, 



-23- 



Application No. 09/917,541 
Brief on Appeal, dated 03/24/05 

no such teaching is present in or apparent from the cited 
prior art references. 

Upon evaluation of the Examiner 1 s response and statements, it 
is respectfully believed that the evidence adduced by the 
Examiner is insufficient to establish a prima facie case of 
obviousness with respect to the claims. Accordingly, the 
Honorable Board is therefore requested to reverse the final 
rejection of the Supervisory Primary Examiner. 

The Honorable Board is therefore respectfully urged to reverse 
the final rejection of the Examiner. 

Respectfully submitted, 



F. Donald Paris (24, 054) 
FDP/bb 

Date: March 24, 2005 
Lerner and Greenberg, P. A. 
Post Office Box 2480 
Hollywood, Florida 33022-2480 
Tel: (954) 925-1100 
Fax: (954) 925-1101 
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Claims Appendix : 

1. A mailing machine assembly, comprising: 

a mailing machine including a controller, a security module 
connected to said controller, and a non-removable program 
memory operationally connected to said security module and 
configured to store an initialization program; and 

a removable authorization device being operationally 
connected to said mailing machine and configured for being 
interrogated by said mailing machine; and 

said security module being programmed to check whether 
authorization is present and for preventing an initialization 
of said mailing machine without authorization. 



2. The mailing machine assembly according to claim 1, 
wherein said authorization device is indirectly connected to 
said mailing machine via a data source selected 



from a group consisting of a personal computer, a laptop, and 
a remote data center. 



3. The mailing machine assembly according to claim 1, 
wherein said authorization device is directly connected to 
said mailing machine. 
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4. The mailing machine assembly according to claim 2, 
wherein said mailing machine is a franking machine having a 
meter with a user interface, for a data input of 
predetermined values, and a postal security device configured 
to check an authorization of the data input. 



5. The mailing machine assembly according to claim 4, 
wherein said franking machine has a base with a first 
interface for attachment of said data source containing 
initialization data for said mailing machine, and a second 
interface for attachment of said authorization device. 



6. The mailing machine assembly according to claim 5, 
wherein said authorization device is a dongle . 



7. The mailing machine assembly according to claim 5, 
wherein said data source contains initialization data for 



said mailing machine and is configured to be attached to said 
first interface of said base of said mailing machine, and 
wherein said authorization device is a chip card and a chip 
card reader is operatively connected to said meter via a 
further internal interface and arranged to be integrated into 
said base. 
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8. The mailing machine assembly according to claim 5, 
wherein said first, second and further interfaces of said 
mailing machine are serial interfaces. 



9. The mailing machine assembly according to claim 4, 
wherein said interface is a serial interface. 



10. The mailing machine assembly according to claim 5, 
wherein said first interface of said base of said mailing 
machine is configured for attachment of said data source, 
said authorization device is connected to said data source 
via a parallel interface, said data source is a computer and 
is coupled via a serial interface of said mailing machine, 
and wherein a chip card reader is integrated and operatively 
connected to said meter via an interface of said meter. 



11. The mailing machine assembly according to claim 1, 
wherein said mailing machine is a franking machine with a 
meter and a chip card reader integrated in said meter and 
coupled to a parallel bus of said meter via an interface and 
wherein said authorization device is a chip card. 



12. The mailing machine assembly according to claim 1, 
wherein said mailing machine is a set of scales, and wherein 
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a chip card reader is integrated into said scales and coupled 
via an interface of said scales, and wherein said 
authorization device is a chip card. 

13. The mailing machine assembly according to claim 1, 
wherein said mailing machine has a modem and a modem 
interface for loading therethrough the initialization data or 
values, and wherein said authorization device is an 
insertable chip card, for authorizing at least that part of 
the initialization data which are loaded into said mailing 
machine from a data source via said modem interface. 

14. The mailing machine assembly according to claim 1, 
wherein said mailing machine is a franking machine having at 
least one program memory with an initialization program and 

a postal security module, for checking the authorization 
before and during the initialization, and wherein said postal 
security module is configured for loading initialization 
data . 

15. The mailing machine assembly according to claim 14, 
wherein a checking of the authorization before and during the 
initialization is performed on the basis of a unique 
authorization number, input via a dongle or a chip card and 
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wherein the authorization is given if the unique 
authorization number input into the mailing machine has a 
predetermined relationship with a number stored in said 
postal security module. 

16. The mailing machine assembly according to claim 1, which 
comprises a program memory at least partly storing the 
initialization program, said program memory forming a 
component part of said security module, and including a 
separate program memory operatively in connection with said 
security module and storing another part of the 
initialization program. 

17. The mailing machine assembly according to claim 16, 
wherein the other part of the initialization program is 

for initialization data stored in a non-volatile manner 
externally of the security module. 

18. A method of initializing a mailing machine, which 
comprises the steps of: 

switching a mailing machine into an initialization mode; 
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authorizing an initialization with an authorization device 
and checking authorization with a security module, in order 
to prevent initialization without authorization; 

if authorization is found, inputting initialization data at 
least partly supplied by a data source; and 

ending the initialization and cancelling of the 
authorization . 

19. The method according to claim 18, which comprises: 

switching a franking machine into the initialization mode and 
establishing a connection to a data source; 

authorizing initialization with an authorization device; 

inputting a battery date BAT_DATE_SAD of a battery of the 
security module, a telephone number of the telepostage data 
center TDC of the destination country and a postage call-up 
number PAN; 

transmitting a serial number SAD-SN of the security module to 
the telepostage data center TDC of the country, to initialize 
a comparison of the serial number SAD-SN sent with a stored 
serial number, and to generate a notification; 
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receiving the notification sent by the telepostage data 
center TDC in the franking machine and loading codes DES-Keys 
for credit recharging into the security module SAD; and 

terminating the initialization and cancelling the 
authorization by removing the authorization device. 

20. The method according to claim 19, wherein the 
establishing step comprises connecting via a transmission 
device selected from a group consisting of a modem, a laptop, 
and a PC interface. 

21. The method according to claim 19, which comprises 
switching into the initialization mode at the goods 

receiving location in the destination country as a result of 
activating a means of activating a user interface and 
establishing a connection to a data source via a transmission 
device selected from the group consisting of a modem, a 
laptop, and a PC interface. 

22. The method according to claim 19, comprising sending 
notification by the telepostage data center TDC including a 
code MAC-Key for a security imprint, which is received by the 
franking machine and loaded into the security module SAD. 
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23. The method according to claim 19, comprising providing 
the codes DES-Keys for credit recharging including the 
subcodes Key(O), Key(l), Kvar and loading the codes into the 
security module SAD. 

24. The method according to claim 23, comprising sending the 
notification by the telepostage data center TDC including 
extra data stored in a non-volatile memory externally of the 
security module and including tfee inkjet cartridge data. 

25. The method according to claim 18, wherein the inputting 
step comprises inputting initialization data with the chip 
card. 

26. The method according to claim 18, comprising providing 
data input of extra data including inkjet cartridge data and 
storing the data in a non-volatile memory externally of the 
security module. 

27. The method according to claim 18, which comprises 
interrogating the authorization device before and during the 
initialization of the mailing machine with predetermined 
data . 
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